truncgit/citrus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add real-time OEM barcode scanning interface and supporting API lookup controller

Browse Source
This commit is contained in:
Ümit Tunç
2026-08-07 14:49:17 +03:00
parent 76dd1395d5
commit 9b719324cd
8 changed files with 1637 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Http/Middleware/EnsureSecurityHeaders.php
+2 -4
View File
@@ -36,10 +36,8 @@ class EnsureSecurityHeaders
// X-XSS-Protection: 1; mode=block (deprecated but still good for older browsers, some scanners check it)
$response->headers->set('X-XSS-Protection', '1; mode=block');
// Permissions-Policy: restrict dangerous features
// This is a bit strict, might need adjustment based on site features.
// For general sites: geolocation=(), microphone=(), camera=() is often safe.
$response->headers->set('Permissions-Policy', 'geolocation=(), microphone=(), camera=()');
// Permissions-Policy: allow camera for barcode scanning
$response->headers->set('Permissions-Policy', 'geolocation=(), microphone=(), camera=(self)');
// Cross-Origin-Opener-Policy: isolate browsing context from cross-origin documents
$response->headers->set('Cross-Origin-Opener-Policy', 'same-origin');